Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa
File:                     5388c196-7e94-302f-b906-613c5acde318.roa (raw, json)
Hash identifier:          yNTwtvbjcV3hU+V1lxDh0V10+qG9wIlHP8NKP9hX4Xc=
Subject key identifier:   52:D2:45:1A:D7:5A:9C:57:2C:9B:BA:63:2A:93:E3:C1:E8:EE:D2:35
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584554981ED2DE7E9813703613D8
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     399122
IP address blocks:        2602:fcd5:a::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1e:d2:de:7e:98:13:70:36:13:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=1cc78b26-1973-4e1f-8b37-bf897b5ff484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a3:b2:90:95:10:45:82:4d:c6:2a:34:aa:ee:
                    b1:3b:6a:e8:52:50:4a:3f:a6:3e:47:c0:aa:0c:f4:
                    9d:77:c2:10:cc:ea:86:d0:4d:82:57:03:b5:f7:85:
                    f0:7e:55:91:f9:a0:be:48:31:eb:58:45:98:24:54:
                    9a:c6:6c:d0:14:50:5a:12:94:7d:37:75:fc:11:9c:
                    1e:13:ab:c4:00:10:53:ef:ff:53:2a:87:fc:61:83:
                    c6:14:85:a8:7f:d9:47:04:e4:d1:f4:4b:30:91:cf:
                    a3:03:b9:d5:dd:44:f5:9c:de:87:08:d1:a2:49:bc:
                    ad:8b:5e:ec:de:ba:e2:d5:87:1e:d6:28:9b:34:4a:
                    c3:f0:67:23:92:89:e2:4a:2b:00:87:27:0a:f4:96:
                    e6:c1:9e:81:99:40:ef:dc:fe:73:31:13:1b:d2:a9:
                    a8:58:c8:99:bd:b3:92:86:ec:d7:1d:0e:5c:7d:6b:
                    18:24:d0:0b:10:f2:1e:f8:44:c8:0f:9f:f6:99:de:
                    cd:4d:8a:15:a4:24:59:45:b9:a2:23:0b:cb:4a:5f:
                    ce:b7:5a:9f:85:93:a5:cb:c4:14:59:4c:72:8b:ba:
                    9a:b8:81:ab:88:2b:b4:4e:97:f9:88:de:c1:4d:1e:
                    5d:90:be:27:ee:d2:2e:3a:e5:bb:e4:c1:21:e3:3c:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D2:45:1A:D7:5A:9C:57:2C:9B:BA:63:2A:93:E3:C1:E8:EE:D2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:29:ad:fa:83:53:27:9e:1b:a3:ae:f7:09:3f:1b:36:87:70:
         cc:70:10:b8:0b:4b:2e:65:17:09:1a:f5:77:09:be:bb:1a:fe:
         5e:f8:85:25:35:c8:8f:5c:42:22:c2:46:29:20:b8:a3:a8:68:
         7f:6f:1b:75:a1:fd:ad:4c:03:9d:5e:a4:77:84:60:d1:48:4f:
         69:64:40:50:90:5a:15:f0:54:9a:cf:b1:20:70:a9:37:a1:e2:
         cc:01:53:af:c8:07:45:e6:41:4e:5d:e1:cd:db:af:3e:13:1f:
         41:ff:59:0c:7c:59:73:87:c9:80:68:55:f4:e0:95:3b:64:dc:
         ee:70:17:46:c5:eb:26:b8:3a:31:a1:c7:f1:ab:15:02:d9:08:
         fc:68:94:a2:d5:7a:46:3c:38:d8:ca:a0:94:a2:8c:1c:e2:d2:
         a9:3b:5f:f6:bd:f3:a0:4c:60:1a:45:36:7d:aa:21:fd:31:ca:
         39:e1:ec:e9:1d:f2:6c:de:2e:95:25:e4:41:80:30:28:c4:13:
         94:bc:46:a2:10:cd:e0:0a:80:bc:ce:79:60:3d:ad:9e:ca:98:
         32:99:db:12:3b:a0:73:50:ca:af:35:d9:fe:07:dd:a2:19:4b:
         03:83:8a:6c:ea:30:fe:7d:8f:f5:ff:1f:eb:43:54:c1:c7:fb:
         57:eb:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:16:15 2024 by rpki-client on console-ams.rpki-client.org